Configure Advanced Audit Policies

You can configure advanced audit policies instead of basic domain policies to collect Active Directory changes with more granularity. Either basic or advanced audit policies must be configured to track changes to accounts and groups, and to identify workstations where changes were made.

Open the Group Policy Management console on any domain controller in the target domain: navigate to Start→Windows Administrative Tools (Windows Server 2016) or Administrative Tools (Windows 2012 R2 and below)→ Group Policy Management.

Open the Group Policy Management console on any domain controller in the target domain: navigate to Start→Windows Administrative Tools (Windows Server 2016) or Administrative Tools (Windows 2012 R2 and below)→ Group Policy Management.